Privacy Policy

Data Controller

The data controller for this website is Harven Journal, with its registered editorial office at 29 Goodge Street, W1T 2PJ London, United Kingdom. For data-related enquiries, please contact us at [email protected].

What Information We Collect

We collect the following categories of information:

• Contact form data. When you use the contact form on this site, we collect the name, email address, and message content you voluntarily provide.
• Usage data. We automatically collect standard log data including your IP address (anonymised where possible), browser type, referring URL, pages visited, and time spent on the site.
• Cookie data. Cookies and similar tracking technologies are used to improve the functionality of the site. Full details are available in our Cookie Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, financial information, or health records.

How We Use Your Information

Personal information collected through this site is used for the following purposes:

• Responding to messages submitted through the contact form.
• Analysing site traffic to understand how editorial content is engaged with, and improving the reading experience accordingly.
• Ensuring the security and technical integrity of the website.
• Complying with legal obligations applicable under UK law.

We do not use your personal information for automated decision-making or profiling. We do not send marketing communications unless you have explicitly opted in to receive them.

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following lawful bases:

• Consent — for the placement of non-essential cookies on your device, where you have given explicit consent via the cookie banner.
• Legitimate interests — for routine site analytics and the technical handling of incoming correspondence, where those interests are not overridden by your data protection rights.
• Legal obligation — where we are required by law to retain or share information with a regulatory authority.

Data Retention

Contact form submissions are retained for a maximum of 12 months from the date of receipt, after which they are securely deleted unless an ongoing correspondence necessitates longer retention. Anonymised usage data derived from site analytics is retained for up to 26 months in aggregate form.

We do not retain personal data for longer than is necessary for the purposes stated in this policy.

Sharing of Personal Data

We do not sell, rent, or trade personal data to third parties. We may share data in the following limited circumstances:

• Service providers. Third-party providers who assist in operating this website (e.g. hosting, analytics platforms) may have access to data under contractual data-processing agreements that restrict their use of the data.
• Legal requirements. We may disclose data where required to do so by law or in response to a lawful request from a UK public authority.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include HTTPS encryption across all pages, restricted access to correspondence inboxes, and periodic review of data handling practices.

No method of electronic transmission or storage is entirely secure. While we work to protect your information, we cannot guarantee absolute security.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or applicable law. When significant changes are made, the "Last updated" date at the top of this page will be revised. Continued use of the site following the posting of changes constitutes your acknowledgement of the updated policy.